Privacy Policy
Last updated: 8 June 2026
Who we are
Playza is a free online multiplayer mini-games platform. For data-protection purposes the "controller" is [OPERATOR LEGAL NAME], based in Moldova ([registered address — to confirm]). You can reach us about privacy at [CONTACT EMAIL].
In short
We collect the minimum we need to run your account and the games, keep play fair and safe, and improve the product. We do not sell your personal data. Analytics and advertising are off until you choose to accept them in the cookie banner.
Data we collect
Account data: your email address, username, password (stored only as a secure hash by our authentication provider), and account status (for example role or whether an account is banned). Profile data: optional display name, bio, and chosen avatar. Gameplay data: rooms you join, moves you make, match results, scores, ratings and rating history, statistics, achievements, streaks, tournaments, and game replays. Social and communication data: chat messages and emotes you send in rooms, friend/block relationships, referrals, and any reports you submit or that concern you. Notifications data: in-app notifications and, only if you enable push notifications, your browser push subscription. Technical data: IP address, device/browser information and server logs (handled by our hosting and infrastructure providers, mainly for security and reliability), plus cookies and similar storage (see the Cookie Policy). Analytics data: if you accept analytics, aggregate usage data such as page views and events.
How we use your data and our legal bases
Under the GDPR (for users in the EU/EEA) we rely on these bases: • To provide your account and the games (create rooms, match you, sync moves, show results, ratings, replays, chat) — performance of a contract with you. • To keep Playza safe and fair (prevent cheating and abuse, moderate content, enforce our terms, secure our systems, handle reports) — our legitimate interests, and where relevant a legal obligation. • To improve the product and understand usage — our legitimate interests and, for analytics cookies, your consent. • For analytics and (in future) advertising — your consent, which you can withdraw at any time. • To meet legal obligations — where the law requires it.
Cookies and consent
We use strictly necessary cookies/storage to run the site (such as your login session and a record of your cookie choices). Analytics and advertising technologies load only after you accept them in the cookie banner, and you can change your choice at any time. See the Cookie Policy for details.
Who we share data with (processors)
We use trusted service providers that process data on our behalf: • Supabase — authentication, database and storage of your account, gameplay and chat data; • Vercel — website hosting and delivery (processes technical data such as IP addresses in server logs); • an analytics provider (for example Google Analytics) — only if you accept analytics; • an advertising provider (for example Google AdSense) — only if advertising is enabled in the future and you accept it. We may also disclose data if required by law or to protect our rights, users, or the public. We do not sell your personal data.
International transfers
Some of our providers operate outside your country, including outside the EU/EEA (for example in the United States). Where personal data is transferred internationally, it should be protected by appropriate safeguards such as the provider’s standard contractual clauses. [The specific transfer mechanisms must be confirmed for each provider.]
How long we keep data
We keep your account and profile data for as long as your account exists. Gameplay, stats and chat are kept to provide history, ratings and replays. When you delete your account, we delete or anonymise your personal data, except where we must keep some information for a limited time for security, dispute, or legal reasons. [Specific retention periods to be confirmed.]
Your rights
Depending on your location (and in particular under the GDPR), you may have the right to: access the data we hold about you; correct inaccurate data; delete your data; restrict or object to certain processing; receive your data in a portable format; and withdraw consent at any time. You also have the right to complain to your local data-protection authority.
Exercising your rights and deleting your account
You can edit much of your profile in the app. To delete your account, or to make any other privacy request, contact us at [CONTACT EMAIL]. We will respond within the time required by applicable law.
Security
We take reasonable measures to protect your data: encryption in transit (HTTPS), passwords stored only as secure hashes by our authentication provider, and database access controls (row-level security) that limit what each user can read or change. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Children
Playza is a general-audience games site and some of our users are young. We do not knowingly collect more personal data from children than is needed to provide the service, and we do not knowingly create accounts for children below the minimum age that applies to them. In the EU/EEA, the minimum age for consenting to data processing varies by country (generally between 13 and 16); other countries have their own rules. If you are below that age, you may need a parent or guardian’s involvement to use the service. If you believe a child has provided us with personal data without the appropriate consent, contact us at [CONTACT EMAIL] and we will take appropriate steps. [Children’s privacy — together with EU age-of-consent rules and any future advertising — requires specific legal review; see the notice at the top of this page.]
Changes to this policy
We may update this policy from time to time. When we make material changes we will update the "Last updated" date and, where appropriate, provide a more prominent notice.
Contact
For any privacy question or request, contact us at [CONTACT EMAIL].